The big Sony breach is only the tip of the online insecurity iceberg, it turns out. Call it Passwordgate: Owners of thousands of websites—including big brands like AT&T, The New York Times, and Macy’s—have been openly exposing their users’ passwords over the past few years by placing them undisg...